Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ffhg-m72p-75j9

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as "authentication secrets."

Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as "authentication secrets."

EPSS

Процентиль: 9%
0.00033
Низкий

Дефекты

CWE-362

Связанные уязвимости

redhat
около 12 лет назад

Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as "authentication secrets."

nvd
около 12 лет назад

Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as "authentication secrets."

EPSS

Процентиль: 9%
0.00033
Низкий

Дефекты

CWE-362